Senior Security Engineer

Summary

Join New Era Technology as a Senior Security Engineer to support a large information security program. Create, build, and document cross-platform cloud service provider automation for AWS and MS Azure. Build and maintain cloud security posture management and build automation CI/CD pipelines. Enhance cloud security controls through log collection and reporting, and build security metrics for dashboarding. This role requires 3-5+ years of cyber and information security engineering experience with a focus on MS Azure and AWS, along with experience in multi-vendor cloud provider infrastructure build automation. Expertise in security governance, automation tools (Terraform, AWS CloudFormation, Azure Resource Manager), Python scripting, and documentation is essential. The ideal candidate will possess excellent communication, analytical, and organizational skills.

Requirements

• 3-5+ years of cyber and information security engineering experience with a focus on MS Azure and AWS cloud service platforms control automation
• 3-5+ years of significant experience in multi-vendor cloud provider infrastructure build automation
• Skilled in extracting cloud configuration compliance metrics and automation of reporting and dashboards
• Must be able to create and maintain documentation on the implementation and operational/maintenance processes
• 3-5+ years experience in IT infrastructure build automation
• Experience using Terraform, AWS CloudFormation, Azure Resource Manager and other equivalent multi-cloud vendor automation tools (e.g., Chef, etc.)
• Python or equivalent IT security infrastructure scripting expertise
• Skilled in extracting configuration compliance metrics and automation of reporting and dashboards
• Must be able to create and maintain documentation on the implementation and operational/maintenance processes
• Expertise in security governance control design and monitoring
• Must be able to identify applicable best practices, standards and document the implementation
• Requires metric reporting and automation skills as well as procedures for continued operation/maintenance
• Experience with designing log forwarding, consolidation of log sources
• Skilled in creation and automation of reporting and dashboards in a dynamic environment
• Ability to explain and write technical details to a non-technical audience and vice versa
• Ability to work autonomously and under pressure
• Ability to influence others and demonstrate leadership
• Excellent attention to detail
• Strong organizational skills
• Excellent analytical skills
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint
• Collaborative team worker – both in person and virtually using MS Teams or similar
• Ability to work as liaison between business and information security / information technology
• Flexibility to accommodate working across different time zones
• Excellent interpersonal communication skills with strong spoken and written English
• Business outcomes mindset
• Solid balance of strategic thinking with detail orientation
• Self-starter, ability to take initiative

Responsibilities

• Create, build and document cross-platform cloud service provider automation including for AWS and MS Azure
• Build and document maintenance for cloud security posture management automation
• Build and document maintenance for cloud security build automation CI/CD pipelines
• Build, troubleshoot and maintain cloud log sources for control effectiveness reporting
• Enhance governance of cloud security controls through cloud log collection and reporting
• Build and enhance security metrics for dashboarding and reporting on cloud security posture management

Preferred Qualifications

• Cybersecurity certifications such as CISSP, CISM a plus
• Experience working at a company with a global footprint and a large enterprise environment